CVE-2025-68739: PM / devfreq: hisi: Fix potential UAF in OPP handling
In the Linux kernel, the following vulnerability has been resolved:
PM / devfreq: hisi: Fix potential UAF in OPP handling
Ensure all required data is acquired before calling devpmoppput(opp) to maintain correct resource acquisition and release order.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Ensure all required data is acquired before calling dev_pm_opp_put(opp), maintaining the correct resource acquisition and release order in the Linux kernel PM/devfreq HiSilicon OPP handling.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68739?
CVE-2025-68739 is classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2025-68739?
To fix CVE-2025-68739, update your Linux kernel to the latest patched version that addresses this vulnerability.
What type of vulnerability is CVE-2025-68739?
CVE-2025-68739 is an issue related to use-after-free (UAF) in the handling of operational performance points (OPP) in the Linux kernel.
Which versions of the Linux kernel are affected by CVE-2025-68739?
CVE-2025-68739 affects certain versions of the Linux kernel that utilize the devfreq subsystem.
Is CVE-2025-68739 exploitable?
Yes, CVE-2025-68739 can potentially be exploited if an attacker can control the operational performance point (OPP) handling within the affected kernel.